Vulnerabilities
Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.
Archives: September 2026 October 2026 CISA KEV / threat intelligence
| CVE | Severity | CVSS | KEV | Description | Modified (UTC) |
|---|---|---|---|---|---|
| CVE-2026-55863 | medium | 5.3 | No | motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection... | 2026-09-30 |
| CVE-2026-55692 | high | 7.5 | No | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips... | 2026-09-30 |
| CVE-2026-55691 | high | 8.6 | No | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips... | 2026-09-30 |
| CVE-2026-55690 | high | 7.5 | No | The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips... | 2026-09-30 |
| CVE-2026-55149 | high | 7.5 | No | Vouch Proxy is an SSO and OAuth/OIDC login solution for Nginx using the auth_request module. Prior to 0.48.0, Cookie in pkg/cookie/cookie.go... | 2026-09-30 |
| CVE-2026-54561 | medium | 6.2 | No | MCP Memory Keeper is an MCP server for persistent context management in AI coding assistants. Prior to 0.13.0, context_import in src/index.t... | 2026-09-30 |
| CVE-2026-53710 | critical | 10.0 | No | MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the python_sandbox_server in mcp-... | 2026-09-30 |
| CVE-2026-46488 | not reported | — | No | motionEye (mEye) is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection... | 2026-09-30 |
| CVE-2026-65831 | high | 7.7 | No | ArcadeDB is a Multi-Model DBMS. Prior to 26.7.1, a reader-role user can submit POST /api/v1/command/{database} with language: js because Pol... | 2026-09-30 |
| CVE-2026-59973 | high | 8.5 | No | FrontMCP is a TypeScript-first framework for the Model Context Protocol (MCP). From mcp-from-openapi 2.3.0 until 2.5.0 and from frontmcp and... | 2026-09-30 |
| CVE-2026-59965 | high | 7.1 | No | Payload Plugins is a collection of plugins designed to enhance Payload CMS. In 0.7.0, @jhb.software/payload-alt-text-plugin exposes POST /ap... | 2026-09-30 |
| CVE-2026-59157 | medium | 6.5 | No | webhookd is a minimalist webhook server that triggers shell scripts and external processes through HTTP requests. Prior to 1.22.0, webhookd... | 2026-09-30 |
| CVE-2026-58196 | medium | 4.7 | No | ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Prior to 0.31.0, remote.Ha... | 2026-09-30 |
| CVE-2026-55887 | not reported | — | No | MCP Gateway allows easy and secure running and deployment of MCP servers. From 0.21.0 until 0.42.2, Docker MCP Gateway YAML-unmarshalled the... | 2026-09-30 |
| CVE-2026-55864 | not reported | — | No | GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a... | 2026-09-30 |
| CVE-2026-55828 | not reported | — | No | qbee transport is a remote access transport protocol implementation. Prior to 1.26.25, the extractTar routine uses strictly lexical path val... | 2026-09-30 |
| CVE-2026-55636 | medium | 5.7 | No | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.6, charts/capsule/templates/configuration.yaml... | 2026-09-30 |
| CVE-2026-55630 | none | 0.0 | No | Kiwi TCMS is an open source test management system. Prior to 16.1, TestCase.extra_link and TestPlan.extra_link accepted unsanitized user inp... | 2026-09-30 |
| CVE-2026-55591 | medium | 5.8 | No | Signal K Server is a server application that runs on a central hub in a boat. Prior to 2.28.0, makeRemoteRequest() in src/serverroutes.ts ac... | 2026-09-30 |
| CVE-2026-55211 | critical | 9.8 | No | Surfio is a library for reading and writing surface files. Prior to 0.0.19, surfio does not correctly validate size fields in IRAP files, le... | 2026-09-30 |